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Serial Number xxxxx 
Issuer Name xxxxx 



Subject Name /C=US/0=IBM/OU=DEVT/CN=JSMITH / 
Signature xxxxx 
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CertificateList ::= SEQUENCE { 

tbsCertList TBSCertList, 

signatureAl gon'thm Al gori thmldenti f Ier, 

signatureValue BIT STRING } 

TBSCertList ::= SEQUENCE { 

version Version OPTIONAL, 

signature Al gori thmldenti fi er , 

issuer Name, 

thisUpdate Time, 

nextUpdate Time OPTIONAL, 

revokedCertif icates SEQUENCE OF SEQUENCE { 

userCertif icate Certi fi cateSeri al Number ,' 

revocationDate Time, 

crl EntryExtensi ons Extensions OPTIONAL 

} OPTIONAL, 

crlExtensions [0] EXPLICIT Extensions OPTIONAL 
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Certificate ::= SEQUENCE { 
tbsCerti f i cate 
si gnatureAl gori thm 
si gnature 



TBSCertif icate, 

Al go r i thm I dent i fier, 

BIT STRING } 



TBSCertificate ::= SEQUENCE 
version [0] 
serial Number 
si gnature 
i ssuer 
val idity 
subject 

subjectPubli cKeylnf o 
issuerUniquelD [1] 
subjectUniquelD [2] 
extensions [3] 



{ 

Version DEFAULT vl, 

Certi fi cateSeri al Number , '-v^ 502 

Al gori thmldenti fier, 

Name , 

Val idity, 

Name , 

SubjectPubli cKeylnf o , 
IMPLICIT Uniqueldentifier OPTIONAL , 
IMPLICIT Uniqueldentifier OPTIONAL, 
Extensions OPTIONAL } 



Version ::= INTEGER { vl(0), v2(l), v3(2) } 
CertificateSerialNumber : := INTEGER 



Validity : := SEQUENCE { 

notBefore Time, 
notAfter Time } 



Time : := CHOICE { 

utcTime UTCTime, 
generalTime General i zedTime } 



Uniqueldentifier ::= BIT STRING 

SubjectPublicKeylnfo ::= SEQUENCE { 

algorithm Al gori thm Identifier, 

subjectPublicKey BIT STRING } 



Extensions ::= SEQUENCE SIZE (1..MAX) OF Extension 

Extension : := SEQUENCE { 

extnID OBJECT IDENTIFIER, 

critical BOOLEAN DEFAULT FALSE, 

extnValue OCTET STRING } 
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